A public-sector research program is consolidating grant-funded datasets with different retention rules. A public-sector research group must prevent accidental public exposure of analytics buckets and receive alerts when bucket policies become broadly accessible. Auditors review access quarterly and require reproducible lineage for reports. Some datasets include old CSV extracts, but the current project scope is the governed production feed. Which option best satisfies the requirements with the least operational risk?
